Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eaf406d441c68c5d64a5cd8e548e86913b480fa6b0df462020b8725b1c327e22

  • Size

    161KB

  • Sample

    210421-6b54kp1rg6

  • MD5

    665e3941dfaafc2a74df2de2304ca3cc

  • SHA1

    d6d468e0b78cd4054ebeedfdb5e1ee2b05b0cc9c

  • SHA256

    eaf406d441c68c5d64a5cd8e548e86913b480fa6b0df462020b8725b1c327e22

  • SHA512

    191c7c46d5049d6f9eb7883324ede842a106f68a8ae416276e8a5c13cc4e98fe81c854070eb9569873e4a7e3d86b668ae6475ac4309ffabd98f13b07d8423487

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172
rc4.plain
rc4.plain

Targets

    • Target

      eaf406d441c68c5d64a5cd8e548e86913b480fa6b0df462020b8725b1c327e22

    • Size

      161KB

    • MD5

      665e3941dfaafc2a74df2de2304ca3cc

    • SHA1

      d6d468e0b78cd4054ebeedfdb5e1ee2b05b0cc9c

    • SHA256

      eaf406d441c68c5d64a5cd8e548e86913b480fa6b0df462020b8725b1c327e22

    • SHA512

      191c7c46d5049d6f9eb7883324ede842a106f68a8ae416276e8a5c13cc4e98fe81c854070eb9569873e4a7e3d86b668ae6475ac4309ffabd98f13b07d8423487

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks